Hackadvisor

– Honest Bug Bounty Reviews! Real feedback from hunters. Share experiences, read reviews, and make informed decisions. Join now!

[Hackadvisor @hackadvisor]

@0xteknogeek said it best:
"The market is ready for a disruption. Build what HackerOne could have been."

So I did.

Hackadvisor is now a FREE bug bounty host. No fees.

Reports encrypted. Mediation. Crypto & bank payouts coming.

Let's disrupt. 🚀

https://t.co/liPt5wL2yL

[Hackadvisor @hackadvisor]

@fwrnr @k3ypt0 @rez0__ @Krevetk0Valeriy Everyone starts as a low impact hunter.

Everyone deserves the same chance. If that bothers you thats your opinion.

It doesnt make their experience worthless. Their review is still based on a real interaction with the program. 🤷🏻‍♂️

[Hackadvisor @hackadvisor]

HackAdvisor browser extension.

Researching a bug bounty program?

Now you can see HackAdvisor reviews directly on program pages across HackerOne, Bugcrowd, YesWeHack, Intigriti, Standoff365, Bi zone Bug Bounty, and Immunefi.

https://t.co/znUbJ9dDqd

https://t.co/cEan4QcZkh

[Hackadvisor @hackadvisor]

@fwrnr @k3ypt0 @rez0__ @Krevetk0Valeriy When we launched HackAdvisor only verified hackers could leave reviews. We kept it that way for about a year.

Later we changed it because we simply didnt see fake reviews becoming a real problem.

If that ever changes we can always go back to verified reviews only.

[Hackadvisor @hackadvisor]

@fwrnr @k3ypt0 @rez0__ @Krevetk0Valeriy You’re absolutely right. I’m just another low impact hacker. That’s probably why HackerOne invited me to the HSP program 😁✊🏻

[Hackadvisor @hackadvisor]

@fwrnr @k3ypt0 @rez0__ @Krevetk0Valeriy We dont have thousands of reviews from unverified hackers. It happens pretty rarely.

If it ever becomes a real problem we will simply require verification before posting reviews. Right now there is no reason to do that.🤷🏻‍♂️

[Hackadvisor @hackadvisor]

@fwrnr @k3ypt0 This will change when the community pushes platforms to adopt a process like HackAdvisor.💁🏻‍♂️

[Hackadvisor @hackadvisor]

@fwrnr @k3ypt0 @rez0__ @Krevetk0Valeriy Maybe because the bug bounty community is better than Google’s 😁

[Hackadvisor @hackadvisor]

@fwrnr @k3ypt0 Here is a real example https://t.co/GXZXrRShet

The program replied to the hacker and worked through the issue even without verification. That is exactly how the problem you are talking about gets solved.

[Hackadvisor @hackadvisor]

@fwrnr @k3ypt0 Sorry, I might have mixed up the accounts 😅

[Hackadvisor @hackadvisor]

@fwrnr @k3ypt0 So I should spend my time money and nerves proving my case on the platform right? 😄

Funny that platforms never added public reviews themselves. I think we both know why. The people paying the platform are the customers.

[Hackadvisor @hackadvisor]

@fwrnr That’s fine. We have a different view of the problem.

We’ll let the community decide whether more transparency is useful.🙌🏻

[Hackadvisor @hackadvisor]

@fwrnr I think you should explore the platform before judging it.

Companies can publicly respond to every review, and if a review is false or misleading, they can challenge it and request its status be updated.

Transparency works both ways.

[Hackadvisor @hackadvisor]

@fwrnr Fair enough. But why should only the top 1% define everyone’s experience?

A program doesn’t interact only with the top 1%. It interacts with thousands of legitimate researchers. Their experience matters too.

[Hackadvisor @hackadvisor]

@fwrnr You missed that part. Verified hackers already have badges on HackAdvisor.

And not everyone wants to leave public reviews. Some researchers fear retaliation from companies or platforms. That’s the reality.🙌🏻

[Hackadvisor @hackadvisor]

@fwrnr Even the top 10% of hackers sometimes face platforms or triagers that downgrade severity or misjudge reports. It happens less often—not never.

HackAdvisor exists to increase transparency. Companies with nothing to hide have nothing to fear from honest feedback.

[Hackadvisor @hackadvisor]

@Hacker0x01, what do you think?

https://t.co/lcdMoLe8Vn

[Zaur Zaurbaev @k3ypt0]

Presented at VK: from a triage dispute to building a community bug bounty aggregator.